Creating a quick and easy login

[gelcreative]

Hi - I've just had a request in from an old client. They are having their website rebuilt bigtime into a database driven one (about time!)

In the meantime, (probably only for about 2 weeks) they'd like their current website (www.mdh.uk.com) to restrict access to registered users through a Register/Login system. Basically they don't want anyone who hasn't registered with them to see any of the properties they have for sale. (Don't ask!!)

The current site has no facilities for a database, so I'm looking for a quick and simple fix to get through the next couple of weeks. I've trawled through hotscripts and keep finding all sorts of scripts listed but could spend hours searching out the best one to use and by then the two weeks will probably be up!

Can anyone point me in the direction of a good one, that I could set up relatively quickly without too much effort? Likely thing is they'll baulk at the cost and shelve the idea anyway so don't want to spend too much time on exploration/trialing.

Thanks !

[DaveSawers]

If the site doesn't have a database, then where do they hold registration information? If they are expecting users to register now for use on the current site for only a short period then I would anticipate that those users would expect their registration information to be transferred to the new site. Why can't the developers of the new site do the registration/login bit of the new site first and then use that on the current site?

For the login/registration script itself, the important thing to know is how much security is required. It's simple to write a form that GETs or POSTSs the login info to a page that checks against info on the database. It's safe enough for uses that do not require ultimate security but I wouldn't expect my bank to use it!

Are you looking for a PHP, .NET or other implementation?

[Dubbya]

In this case, since it's temporary, why not just have the Server Administrator set up basic http authentication on the site.

All users can share the same login information and the Admin can easily remove it once the new site is in place. Set it up, send out an email to users requiring access and let them log in and out as they see fit.

Leave it in place until the new site is ready to roll. You won't have any scripts to worry about and no database to administer.

No database to implement, no script hacking and, as long as none of the users share the user name/password in a forum or blog it'll work without any problem whatsoever.

Send an email to the Server Admin to see what they can do for you. I doubt you'd have any problem getting this set up.

Simple, inexpensive (probably FREE) and, IMHO, the perfect temporary solution.

[gelcreative]

Hmm, thanks Dubbya, but that won't work because the visitors are all unknown prospective customers !!

In my opinion they're shooting themselves in the foot, because you're supposed to make it *easy* for your prospective customers, not create barriers!

[Tech Manager]

Going with a database is the best solution. However, you could use an .htaccess protected text file for a short term solution. Store your user credential info in a separate directory and block all outside access to the script.

[Peopleunit]

1. Remove all visible links on the website that point to the listings.

2. (Optional) Change the URL/Folder of the listings section if you don't want existing bookmarks to work.

3. Send out an email out to all existing members, including an explanation and the (now hidden) link/URL pointing to the listings section. And ask that they not share the URL with others...

NOTE: If you change the URL for the listings section, you might modify the pages served up from any existing inbound links or bookmarks that still point to the "old" listing section too, those pages should display a notice about the new change(s), or something more appropriate.

Best of all - its QUICK! No one has to mess with registrations and you could have the whole thing done in a couple hours or less, probably.

BTW - I do accept Paypal donations -

[bigaussie]

Sometimes clients with weird requests have a legitimate reason; most times it is just ignorance of how the internet works. You might point them in the direction of their server log reports.

If they still want visitors to "register" before seeing their wares - I use a great little PERL script available here: SiteInteractive.com - Account Manager Professional

For less than US$90 this can handle up to several thousand "members". They can have someone check the visitor out before allowing them entry. All your server needs is PERL installed. No database, and dead easy to install and get going.

Disclaimer:
I have NO Interest in this product, other than the fact it works well with minimal overhead on your server. I host over 150 domains, and am always watching for programs which have a light footprint on our servers. Good luck.

[jScott_Harris]

I think you're going to be stuck using http authentication to do this. Have people signup via a simple contact form online and then send them the username and pass. You can set the contact form to automatically email them the info so it shouldn't be much overhead.